General
- Target 2026-08-12_645cceb6cac0290c927888ad9089d69f_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.4MB
- Sample260812-ryjmasak71
- SHA256 4a726279511ea3303d2e98a96f90a31d6b81f909019cd66b137d299f5320bb22
- MD5 645cceb6cac0290c927888ad9089d69f
- SHA1 7f902a6b73dabea07e25159bccfb9cb04f92af51
- SHA512 042a7bdc58055bff08c43d34ed350df91a09185b2a9eb80c09b5067d16f51b389e9001eb4cff451272ba06cee735a19d10b70045a35c8896a6670c94d822468f
- SSDEEP 49152:DgBStO49+rFWiBLoQkObp62ZTvFDhVoPF6y+EYm2hPzL/pSDDSoLPU3ySrBvToEr:719eNbH9convh6UyAoEx5maH7wRGpj3
- TLSH T1A9269D13F5DA01F8C069D1B9874AA232FA61BC454B3572DF0A9077122B7AEE49F3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_645cceb6cac0290c927888ad9089d69f_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_645cceb6cac0290c927888ad9089d69f_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom
- Size 4.4MB
- SHA256 4a726279511ea3303d2e98a96f90a31d6b81f909019cd66b137d299f5320bb22
- MD5 645cceb6cac0290c927888ad9089d69f
- SHA1 7f902a6b73dabea07e25159bccfb9cb04f92af51
- SHA512 042a7bdc58055bff08c43d34ed350df91a09185b2a9eb80c09b5067d16f51b389e9001eb4cff451272ba06cee735a19d10b70045a35c8896a6670c94d822468f
- SSDEEP 49152:DgBStO49+rFWiBLoQkObp62ZTvFDhVoPF6y+EYm2hPzL/pSDDSoLPU3ySrBvToEr:719eNbH9convh6UyAoEx5maH7wRGpj3
- TLSH T1A9269D13F5DA01F8C069D1B9874AA232FA61BC454B3572DF0A9077122B7AEE49F3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1